Summary: PrestaShop before 1.4.11 allows Logistician, translators and other low level profiles/accounts to inject a persistent XSS vector on TinyMCE.Published: Friday, February 14, 2020 - 00:15cvss: 5.0